The /START-EDTU
command can be entered under all user IDs which possess the privilege TSOS
and/or STANDARD-PROCESSING
. If a user ID has only one or more of the following privileges, then EDT is started but any statements with security implications are rejected.
Privilege | Meaning | System ID |
HARDWARE-MAINTENANCE | Hardware online maintenance | $SERVICE |
SECURITY-ADMINISTRATION | Security administration | $SYSPRIV |
SAT-FILE-MANAGEMENT | Management of SAT files | $SYSAUDIT |
SAT-FILE-EVALUATION | Evaluation of SAT files | $SYSAUDIT |
The following statements have security implications for user IDs with these privileges:
Statement | Meaning |
@EXEC | Start program |
@LOAD | Load program |
@RUN | Run a user program as a subroutine |
@SYSTEM | Issue system commands |
@UNLOAD | Unload program |
@USE | Define external statement routines |
If used with the above-mentioned user IDs, these statements are rejected with error message EDT4976
.